maven:ProjectArtifactMetadataFuzzer: Security exception in java.base/java.nio.CharBuffer.wrap

Detailed Report: https://oss-fuzz.com/testcase?key=6243951863988224 Project: maven Fuzzing Engine: libFuzzer Fuzz Target: ProjectArtifactMetadataFuzzer Job Type: libfuzzerasanmaven Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.nio.CharBuffer.wrap...

metadata-extractor:ImageMetadataReaderFuzzer: Security exception in com.drew.imaging.quicktime.QuickTimeReader.processAtoms

Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=5743421473488896 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...

OSV-2024-1397 Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=385326423 Crash type: Security exception Crash state: org.springframework.expression.spel.ast.OpPlus.getValueInternal java.base/java.util.HashMap.get org.springframework.core.convert.TypeDescriptor.valueOf...

mvel:MvelFuzzer: Security exception in java.base/java.util.Objects.hashCode

Detailed Report: https://oss-fuzz.com/testcase?key=4692448101597184 Project: mvel Fuzzing Engine: libFuzzer Fuzz Target: MvelFuzzer Job Type: libfuzzerasanmvel Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.Objects.hashCode...

spring-data-mongodb:ParameterBindingJsonReaderFuzzer: Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

Detailed Report: https://oss-fuzz.com/testcase?key=5534052194516992 Project: spring-data-mongodb Fuzzing Engine: libFuzzer Fuzz Target: ParameterBindingJsonReaderFuzzer Job Type: libfuzzerasanspring-data-mongodb Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

checker-framework:UtilCheckerFuzzer: Security exception in org.checkerframework.checker.formatter.util.FormatUtil.formatParameterCategories

Project: https://github.com/typetools/checker-framework.git Detailed Report: https://oss-fuzz.com/testcase?key=6366225344561152 Project: checker-framework Fuzzing Engine: libFuzzer Fuzz Target: UtilCheckerFuzzer Job Type: libfuzzerasanchecker-framework Platform Id: linux Crash Type: Security...

CVE-2022-34159

Huawei printers have an input verification vulnerability. Successful exploitation of this vulnerability may cause device service exceptions. Vulnerability ID: HWPSIRT-2022-80078 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID: CVE-2022-34159...

yamlbeans:YamlReaderFuzzer: Security exception in com.esotericsoftware.yamlbeans.YamlReader.readValue

Detailed Report: https://oss-fuzz.com/testcase?key=6656904681553920 Project: yamlbeans Fuzzing Engine: libFuzzer Fuzz Target: YamlReaderFuzzer Job Type: libfuzzerasanyamlbeans Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

OSV-2024-1388 Security exception in com.google.gson.internal.bind.TypeAdapters$28.write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=384541935 Crash type: Security exception Crash state: com.google.gson.internal.bind.TypeAdapters$28.write com.google.gson.JsonElement.isJsonPrimitive com.google.gson.JsonElement.getAsJsonPrimitive...

imagemagick:encoder_cals_fuzzer: Use-of-uninitialized-value in ThrowMagickExceptionList

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4921171115573248 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodercalsfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

sigstore-java:BundleReaderFuzzer: Security exception in com.google.gson.internal.bind.TypeAdapters$28.write

Project: https://github.com/sigstore/sigstore-java.git Detailed Report: https://oss-fuzz.com/testcase?key=4812223141183488 Project: sigstore-java Fuzzing Engine: libFuzzer Fuzz Target: BundleReaderFuzzer Job Type: libfuzzerasansigstore-java Platform Id: linux Crash Type: Security exception Crash...

OSV-2024-1382 Security exception in jflex.core.NFA.insertNFA

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=383999281 Crash type: Security exception Crash state: jflex.core.NFA.insertNFA java.base/java.util.zip.ZipFile$Source.getEntryPos java.base/java.util.zip.ZipFile.getEntry...

jflex:JflexFuzzer: Security exception in jflex.core.NFA.insertNFA

Detailed Report: https://oss-fuzz.com/testcase?key=5615302020235264 Project: jflex Fuzzing Engine: libFuzzer Fuzz Target: JflexFuzzer Job Type: libfuzzerasanjflex Platform Id: linux Crash Type: Security exception Crash Address: Crash State: jflex.core.NFA.insertNFA...

Syncfusion Essential Studio for ASP.NET MVC security vulnerabilities

Syncfusion Essential Studio for ASP.NET MVC is a set of server-side wrappers powered by Essential JavaScript from Syncfusion. A security vulnerability exists in Syncfusion Essential Studio for ASP.NET MVC prior to version 27.1.55, which stems from an XML exception being thrown when re-saving a DO...

apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.EvalContext.isChildOrderingRequired

Detailed Report: https://oss-fuzz.com/testcase?key=6267311190769664 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Denial of Service(DOS) in LangChainLLM due to missing exception handler.

Summary The streamcomplete method of the LangChainLLM class executes the llm using a thread and retrieves the result of the llm via the getresponsegen method of the StreamingGeneratorCallbackHandler class. During this process, getresponsegen recursively detects the onllmerror and onllmend events...

jackson-dataformat-xml:XmlFuzzer: Security exception in com.sun.xml.stream.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next

Project: https://github.com/FasterXML/jackson-dataformat-xml.git Detailed Report: https://oss-fuzz.com/testcase?key=6019483944157184 Project: jackson-dataformat-xml Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanjackson-dataformat-xml Platform Id: linux Crash Type: Securi...

CVE-2024-55884

In the Mullvad VPN client 2024.6 Desktop, 2024.8 iOS, and 2024.8-beta1 Android, the exception-handling alternate stack can be exhausted, leading to heap-based out-of-bounds writes in enable in exceptionlogging/unix.rs, aka MLLVD-CR-24-01. NOTE: achieving code execution is considered non-trivial...

Mullvad security vulnerabilities

Mullvad is a commercial VPN service from Mullvad, Inc. A security vulnerability exists in Mullvad that stems from the possibility that the exception handling standby stack may be exhausted, resulting in heap-based out-of-bounds writes...

CVE-2024-55884: Out-of-bounds Write

In the Mullvad VPN client 2024.6 Desktop, 2024.8 iOS, and 2024.8-beta1 Android, the exception-handling alternate stack can be exhausted, leading to heap-based out-of-bounds writes in enable in exceptionlogging/unix.rs, aka MLLVD-CR-24-01. NOTE: achieving code execution is considered non-trivial...